92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 16:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe
Size 10.6MB
Sample260805-tz34face53
SHA256 92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80
MD5 4f1a087bcb663aab2a06e22bb42fbd0e
SHA1 b5b851d7798ce23c3ce3c0cc0f9b1542acb02bc6
SHA512 688f9cdba16f5a4d985afa613daad87cfae37e6f729b583fdc6565423178a7a442854cad3d82b9adfc0b198a2703c5aeaa18e5c20888ff95593f720795ecb461
SSDEEP 196608:Ch8Sp69gDGP6X+48PkBl6eNTx9Pe20/zkaiuMlEu:COSp6S0kBl6wdCzkai6
TLSH
T16EB6E102EFC52505EB2A263016397E7BD721BEC41BB44BCB97A67C8855752D24C32B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
51	2372	92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2372	92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe

C:\Users\Admin\AppData\Local\Temp\92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe
"C:\Users\Admin\AppData\Local\Temp\92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 6f085bb3c38ca6bb7da1e07ad076615a68b06062a7d29457e0b51919684a64b6
MD5 71c578e55189a6a94938cf01e2dbb7e7
SHA1 b84e7dbf46f30ae2ba1af75390388ac8d20499b5
SHA512 86cb296f84ab0cf02b9fe200351593afa2afa050b21c991dd8765985ee1e1ecd25509af2e56fa9df6965a49c3f9cd9ed46097af38ae0f8205a2524159780d8fb
TLSH
T18B41CB467DDF4AB44E48A28F09712DB5C914B4C4F938C9E9AEB91A0C06D383079EF869
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 559c64b945501e73d7c2786d4a547f3e14ae3d10afe84453f31ba7cc610c3a05
MD5 4e00d39ded6c7a2ce237b37dab785a58
SHA1 db1a8cb432711bbb54964cbdcaf5217830eff605
SHA512 167229d9a38da847003777c540836f0fd1299ed551e4678498168459fe540b4bc75f3ea35d37d08abb6aa3a5004fab48845ad189a220207023a8106426ad321e
SSDEEP 96:KW9WEM2i1dMWbnHsHcYHnH9HccEHOH+VHpH/HcH/HKHoHX8HAHaHmH5HEHE4ZUK:BDi1SWbEt42K
TLSH
T164A1AF0238EF45B49E4A53DE98663D70CD48B484F534CCD9AE994A0C5DE35207DBF86E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 d3a5eb042291371a908ab7f7897a125821654efe1652e45a53c2e6bcba9d9d1d
MD5 c01308200ae70fe13167a122871fcc71
SHA1 cbab57be18bf0fe92277dd5e637ce4054d27cbbc
SHA512 7ab3d5a327b8bf8bc8c2b85c76bceb90862352afdb06c10ec4de3f124f92729e24e0eb6d5e56dc1f4e3e5973146cdc4ae7520ebc94d620bec689e01a2101a2f9
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads